Who we are
DealRevs is a product of AutoData Middle East, a World Automotive Group company based in Dubai, United Arab Emirates. In this policy, “we”, “us” and “our” mean AutoData Middle East, which runs this website and the DealRevs service.
What this policy covers
This policy covers personal information we handle when:
- you visit this website;
- you write to us, for example to ask for a demo or an access code to the guided demo;
- you use DealRevs as someone who works at a dealership; and
- a dealership that uses DealRevs records your details because you are selling or trading in a car.
Our role is different in each case. For the website, our correspondence and the accounts of people who use DealRevs, we decide how information is used: we are the controller. For the records a dealership keeps in DealRevs about its own customers, the dealership is the controller and we act on its instructions as its processor, under our agreement with it.
Visiting this website
This website is a set of static pages. It sets no cookies, uses no analytics or tracking, shows no adverts and loads no scripts, fonts or images from other companies. The interactive examples run entirely in your browser and save nothing.
Like any website, the servers that deliver it see technical information with each request: your IP address, the page asked for, the time, and your browser's user agent and referring page. The site is delivered by Cloudflare, which processes this information for us to serve the pages and protect them from abuse. We don't use it to identify you.
When you write to us
The Book a demo page doesn't send or store anything. It prepares an e-mail that you send yourself, from your own mail app or, if you choose, by opening it in Gmail or Outlook on the web or copying it. When you write to us that way, or at any of our addresses, we receive what you choose to include: usually your name, your dealership, where you trade, the number of rooftops, your role, and perhaps a phone number, the car you'd bring and a message.
We use it to reply, arrange and give a demo, issue a guided-demo access code if you ask for one, and keep a record of our conversation. We won't add you to a mailing list or pass your details to anyone outside World Automotive Group.
The guided demo contains only fictional data. Each visitor gets a private copy of the made-up Sandstone Auto Group, which is deleted after 48 hours.
Using DealRevs at a dealership
DealRevs has no public sign-up. We set up each dealer group, and its owner or admin invites the team. For each person who uses it, we hold:
- Account details: name, work e-mail address, language, and your role at each rooftop.
- Sign-in information: the e-mailed one-time codes you request, a securely hashed password if you set one, your active sessions, and the browser, device and IP address used to sign in, so we can rate-limit attempts, alert you to a new browser and let you end sessions.
- What you do in DealRevs: the appraisals, valuations, approvals, price changes and notes you create. Significant actions are written to the dealership's audit log, which can't be edited or deleted, so that the dealership has a true record of who did what.
- Support: what you tell us when you ask for help.
Your dealership's owners and admins decide who has access and what each role can see. Restricted fields are left out by our servers, not just hidden on screen.
Our own staff can create organisations and manage the service, but cannot see a dealership's records, and there is no way for staff to “log in as” a user.
If you sold a car to a dealer
A dealership using DealRevs may record your name, phone number, preferred language and channel, the date you'd like a decision by, your car's details and photos, the offer made to you, and whether you consented to your details being processed and to marketing. DealRevs asks for that consent before an offer is submitted, and stores it with the version of the wording you were shown.
The dealership is responsible for these records and decides how they're used. If you want to see, correct or delete them, please ask the dealership first. If you contact us instead, we'll pass your request on to them and help them deal with it.
Vehicle checks, such as the import status and the paid vehicle history report, are looked up by the car's VIN. No customer details are sent to AutoData's vehicle and market data services, and VINs are hashed in caches that are shared between dealerships.
Why we use information
| What for | Why we're allowed to |
|---|---|
| Providing DealRevs to dealerships, and supporting the people who use it | Our contract with the dealership |
| Keeping accounts and data secure: sign-in limits, new-browser alerts, the audit log, error monitoring | Our legitimate interest in a secure, reliable service, and our contract with the dealership |
| Replying to enquiries and arranging demos | Our legitimate interest in answering people who contact us |
| Processing a dealership's customer records | The dealership's instructions; the dealership decides its own lawful basis |
| Meeting legal obligations and dealing with disputes | The law that applies to us, and our legitimate interest in protecting our rights |
We don't sell personal information, use it for advertising or build profiles of people from it. DealRevs makes no automated decision about a person: its suggestions are about cars and prices, and a person approves every offer.
Who we share it with
We share personal information only as needed to run the service:
- Hosting and delivery: Cloudflare, which runs the website and the DealRevs application.
- Databases and file storage: our providers in Western Europe, where DealRevs records and photos are kept.
- Error monitoring: Sentry, which receives technical reports when something goes wrong.
- E-mail delivery: the provider that sends sign-in codes, invitations and alerts.
- World Automotive Group companies that help us run and support DealRevs, under the same standards as this policy.
- Authorities and advisers, where the law requires it or to protect rights and safety, and a buyer or successor if the business changes hands, who would remain bound by this policy.
Our providers act on our instructions, and only receive what they need to do their job.
Where it is stored
As of October 2026, DealRevs runs on Cloudflare Workers pinned to London, with databases and private file storage in Western Europe. This means personal information is stored outside the GCC, in the United Kingdom and the European Union. Where information is transferred across borders, we rely on the safeguards the law that applies requires, such as contractual protections with our providers.
How long we keep it
We keep information for as long as we need it for the reasons above. Correspondence about demos is kept while the conversation is useful and then deleted. A dealership's records, including its audit log, are kept while the dealership uses DealRevs; the dealership can ask us to delete records, and we handle those requests individually.
We haven't yet set fixed retention periods for every type of record. When we do, we will publish them here. Server logs held by our hosting provider are kept only for short periods.
How we protect it
Each dealership's data is kept separate, and which dealership a request belongs to comes from the signed-in session, never from the browser. Sign-in uses e-mailed codes or passwords with rate limits and lockouts. Files are reached only through short-lived signed links. The audit log can't be changed at the database level. The Security page explains this in more detail.
No system is perfectly secure. If a breach affects your personal information, we will tell those affected and the authorities as the law requires.
Your choices and rights
Depending on where you are and the law that applies, you can ask us to:
- tell you whether we hold personal information about you, and give you a copy;
- correct information that is wrong or incomplete;
- delete it, or restrict how we use it;
- stop using it where we rely on our legitimate interests;
- give it to you, or to someone else, in a common format; and
- withdraw consent you gave, without affecting what happened before.
Write to privacy@dealrevs.com. We'll confirm who you are before acting, and reply within 30 days. If your request is about a dealership's records, we'll pass it to the dealership, which is responsible for them. Some information, such as audit-log entries, may need to be kept to meet legal obligations or protect the dealership's records; if so, we'll explain why.
You can also complain to the data protection authority where you live. We'd appreciate the chance to put things right first.
Children
This website and DealRevs are for businesses and the people who work in them. They aren't meant for anyone under 18.
Changes to this policy
We'll update this policy when the product or the law changes, and change the date at the top. If a change matters to how a dealership's data is handled, we'll tell the dealership directly before it takes effect.
How to reach us
AutoData Middle East, Dubai, United Arab Emirates.
Privacy questions and requests: privacy@dealrevs.com
Everything else: hello@dealrevs.com